docs/91406: bsnmpd needs a config option to disable write ability.

john fleming john.fleming-eds at eds.com
Fri Jan 6 17:30:16 UTC 2006


>Number:         91406
>Category:       docs
>Synopsis:       bsnmpd needs a config option to disable write ability.
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-doc
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Jan 06 17:30:02 GMT 2006
>Closed-Date:
>Last-Modified:
>Originator:     john fleming
>Release:        6.0-R
>Organization:
pfSense
>Environment:
FreeBSD 6.0-R
>Description:
              There currently is no way to disabled read/write community in bsnmpd. The default for bsnmpd is a hard coded public for both read and write community strings. There needs to be a way to set the write (and possibly read ) string to NULL or something along those lines, to disabe snmp write support.
>How-To-Repeat:
              N/A
>Fix:
              two options, set write and read string to something and tell no on (NO ONE I SAY!). Option 2, disable snmp read/write strings via a code change. Edit contrib/bsnmp/snmpd/main.c, you should see something like..

	(void)comm_define(1, "SNMP read", NULL, "public");
	(void)comm_define(2, "SNMP write", NULL, "public");


change both "public"s to NULL. (no quote marks).

then rebuild bnmpd.

# stop bsnmpd first.

cd /usr/src/usr.sbin/bsnmpd
make obj
make depend
make
make install

# restart bsnmpd

>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-doc mailing list